Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows r…Check if you run itEPSS 0.43%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- High8.8Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that a…Check if you run itEPSS 0.44%May 29, 2026
- High8.5Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- Critical9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine.Check if you run itEPSS 0.57%May 29, 2026
- Medium6.4A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component.Check if you run itEPSS 0.15%May 29, 2026
- Critical10.0The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key.Check if you run itEPSS 0.26%May 29, 2026
- High7.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.45%May 29, 2026
- Medium6.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.40%May 29, 2026
- Low2.7A flaw was found in the Quay config-tool's GitLab OAuth validator.Check if you run itEPSS 0.20%May 29, 2026
- Medium5.3The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_sit…Check if you run itEPSS 0.41%May 29, 2026
- Medium5.3The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Payment Bypass via Insufficient Verification of Data Authenticity in all versions up…Check if you run itEPSS 0.20%May 29, 2026
- High8.1The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 This is due to missing nonce verifi…Check if you run itEPSS 0.21%May 29, 2026
- Critical10.0The acer_cgi.log file in the device firmware is accessible without authentication via the web interface.Check if you run itEPSS 0.52%May 29, 2026
- Critical10.0Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.Check if you run itEPSS 1.34%May 29, 2026
- High8.3Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.Check if you run itEPSS 0.21%May 29, 2026
- Critical10.0Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.Check if you run itEPSS 0.33%May 29, 2026
- High8.6The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.Check if you run itEPSS 0.37%May 29, 2026
- High8.7Unauthenticated Debug Service.Check if you run itEPSS 0.21%May 29, 2026
- Medium4.8ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent Jav…Check if you run itEPSS 0.18%May 29, 2026
- Medium4.8ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent Jav…Check if you run itEPSS 0.18%May 29, 2026
- High7.5CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows al…Check if you run itEPSS 0.24%May 29, 2026
Sort